Find notable cyber news and cases, enriched with sources, timelines, and signals.

Rising cybersecurity skills shortages are driving incident impact across global organizations

Target Trend
First reported
Last updated
Happening score
H score 19
1 unique sources, 1 articles

Summary

Hide ▲

Global cybersecurity skills shortages are worsening security posture, with 59% of surveyed professionals reporting critical or significant gaps in 2025 and 88% saying those shortages contributed to at least one significant cybersecurity incident. The shortage is increasingly about specialized skills rather than headcount alone, especially in AI, cloud security, and risk assessment. The trend matters because staffing and budget pressures are translating into misconfigurations, unsecured systems, and process failures across organizations.

Related Happenings

Cybersecurity professionals report a persistent DFIR skills gap affecting organizational security

Target Trend
First: 04.09.2025 23:22 Last: 04.09.2025 23:22 Sources 1

About this happening: A measured **DFIR skills gap** among **cybersecurity professionals** is reducing their ability to secure organizations and handle disruptive attacks. The gap is significant enough...

Timeline

  1. 04.12.2025 13:00 2 articles · 5mo ago

    ISC2 reports worsening global cybersecurity skills shortages

    Initial Disclosure

    ISC2’s 2025 Cybersecurity Workforce Study reports that global organizations are facing major cybersecurity skills shortages that are worsening security posture, with 59% of surveyed professionals citing critical or significant gaps versus 44% last year. The study says AI is the top shortfall, followed by cloud security, risk assessment, application security, GRC, and security engineering, and that the biggest drivers are a dearth of talent and lack of budget. Respondents also link the shortages to operational harm, including at least one significant cybersecurity incident for 88% of organizations, more than one incident for 69%, and common failures such as process oversights, misconfigurations, unsecured systems, and missed use of emerging security technology.

    Show sources